medium5.5
CVE-2026-77488
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
Impact
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Sql Server 2017 | before 14.0.2130.4 from 14.0.3006.16 before 14.0.3550.4 |
| Microsoft | Sql Server 2019 | before 15.0.2190.7 from 15.0.4003.23 before 15.0.4490.9 |
| Microsoft | Sql Server 2022 | before 16.0.1200.5 from 16.0.4003.1 before 16.0.4275.2 |
| Microsoft | Sql Server 2025 | before 17.0.1135.8 from 17.0.4006.2 before 17.0.4085.5 |